Windows XP password reset

[wrc559]

Have a customer who received a call regarding a virus.
*Continues the story*... Upon rejecting to pay they have placed the windows XP machine into ransom. They placed a password on the boot up, I believe it has something to do with the SAM registry.

Anyway you can see an image here : http://triplescomputers.com/blog/casest ... m-lockout/

Managed to remove this password using an offline disk that assisted with the process. SAMreset.iso

Then it appears they have changed the user account password the user account display name ( I am asshole) & the administrator account password.
So booting into safe mode. Selecting admin, now prompts password. Tried all common pass phrases.
I used various offline password assist programs & Hirons Boot Cd windows XP mini. Was unable to change the passwords with various errors & im out of options.

This has taken me hours and I feel I can write a novel on all the tools and tricks I have learnt today.
Is there a way to change the admin or user password in XP using any specific tools or, bypass it to access the operating system. I am open to offers, I'll be with the PC again in the morning.
Sorry, if this is the wrong forum for this topic...

[Fred]

There are tons of tools for the effect.
https://blog.achievable.me/tech/6-free- ... ery-tools/

I would start with this one:
http://pogostick.net/~pnh/ntpasswd/

Use Rufus to create a USB bootable image.

[wmmiller]

Trinity Rescue Kit work well for that, although I haven’t used in in some time. I use Active Password Changer 6 but that is a paid program. I like it because it works well and you can create a bootable ISO with a windows GUI if one so chooses.

Bill

[reggaemanu]

I would start with this one:
http://pogostick.net/~pnh/ntpasswd/

Use Rufus to create a USB bootable image.

+1 for offline nt password
It is perfect for resetting passwords (or enable/disable accounts) in any version of windows from XP to 7 (and maybe later as long as you use a local account, it won't work if the account is linked to a microsoft account).

[Charger440]

I personally use Trinity rescue for that but a friend of mine uses NTOffline password changer

[Brink]

Or password renew on that disk I gave you.

[wrc559]

Thank you, Unfortunately. I am not sure what went wrong of what the scammers did. But nothing worked. Had to reinstall windows.

Seems to be a common ransom they are doing lately.

[goclukee]

NT Password should work on well on XP. but for the latest Windows 10, it seems doesn't work at all. My latest finding is UUkeys, which is great for password reset. It is a nice alternative if NT Password failed to work.

[Fred]

goclukee NT Password works on Windows 10, but it does not work for Microsoft accounts. You need to use the Outlook online options to recover the account. But you can still use NT Password to enable the built-in admin account in order to get access to the computer and create a new user account.

[Xander]

I find most older PCs always have CD drives (whether they function or not is another matter); it's the newer ones that don't (and that's just laptops). I don't think I've ever seen a desktop that didn't have a CD drive (even those 'Walmart specials' with the mini-mobos and zero expansion options) ...and it's not much of a problem to plug in a working one to the mobo.

"im planning to replace windows with suse as much as possible"
On your **client's** PCs?

[WakssEnd]

If it is a short & simple passwords for Windows XP,install a free tool to unlock it.
But if not,all you need to do is brute force it.
just do it like this:
http://ophcrack.sourceforge.net/download.php
https://www.winpwd.com/